Cisco 300-715 Practice Exams
Last updated on Oct 22,2026- Exam Code: 300-715
- Exam Name: Implementing and Configuring Cisco Identity Services Engine (SISE)
- Certification Provider: Cisco
- Latest update: Oct 22,2026
A laptop was stolen and a network engineer added it to the block list endpoint identity group.
What must be done on a new Cisco ISE deployment to redirect the laptop and restrict access?
- A . Select DenyAccess within the authorization policy.
- B . Ensure that access to port 8443 is allowed within the ACL.
- C . Ensure that access to port 8444 is allowed within the ACL.
- D . Select DROP under If Auth fail within the authentication policy.
An engineer tests Cisco ISE posture services on the network and must configure the compliance module to automatically download and install on endpoints.
Which action accomplishes this task for VPN users?
- A . Create a Cisco AnyConnect configuration and Client Provisioning policy within Cisco ISE.
- B . Configure the compliance module to be downloaded from within the posture policy.
- C . Push the compliance module from Cisco FTD prior to attempting posture.
- D . Use a compound posture condition to check for the compliance module and download if needed.
What does the dot1x system-auth-control command do?
- A . causes a network access switch not to track 802.1x sessions
- B . globally enables 802.1x
- C . enables 802.1x on a network access device interface
- D . causes a network access switch to track 802.1x sessions
An organization wants to split their Cisco ISE deployment to separate the device administration functionalities from the mam deployment. For this to work, the administrator must deregister any nodes that will become a part of the new deployment, but the button for this option is grayed out.
Which configuration is causing this behavior?
- A . One of the nodes is an active PSN.
- B . One of the nodes is the Primary PAN
- C . All of the nodes participate in the PAN auto failover.
- D . All of the nodes are actively being synched.
A network administrator is configuring authorization policies on Cisco ISE There is a requirement to use AD group assignments to control access to network resources After a recent power failure and Cisco ISE rebooting itself, the AD group assignments no longer work.
What is the cause of this issue?
- A . The AD join point is no longer connected.
- B . The AD DNS response is slow.
- C . The certificate checks are not being conducted.
- D . The network devices ports are shut down.
An engineer needs to configure a Cisco ISE server to issue a CoA for endpoints already authenticated to access the network. The CoA option must be enforced on a session, even if there are multiple active sessions on a port.
What must be configured to accomplish this task?
- A . the Reauth CoA option in the Cisco ISE system profiling settings enabled
- B . an endpoint profiling policy with the No CoA option enabled
- C . an endpoint profiling policy with the Port Bounce CoA option enabled
- D . the Port Bounce CoA option in the Cisco ISE system profiling settings enabled
What is needed to configure wireless guest access on the network?
- A . endpoint already profiled in ISE
- B . WEBAUTH ACL for redirection
- C . valid user account in Active Directory
- D . Captive Portal Bypass turned on
An administrator is adding network devices for a new medical building into Cisco ISE. These devices must be in a network device group that is identifying them as "Medical Switch" so that the policies can be made separately for the endpoints connecting through them.
Which configuration item must be changed in the network device within Cisco ISE to accomplish this goal?
- A . Change the device type to Medical Switch.
- B . Change the device profile to Medical Switch.
- C . Change the model name to Medical Switch.
- D . Change the device location to Medical Switch.
An administrator is configuring a new profiling policy within Cisco ISE The organization has several endpoints that are the same device type and all have the same Block ID in their MAC address. The profiler does not currently have a profiling policy created to categorize these endpoints. therefore a custom profiling policy must be created.
Which condition must the administrator use in order to properly profile an ACME Al Connector endpoint for network access with MAC address <MAC ADDRESS>?
- A . MAC_OUI_STARTSWITH_<MACADDRESS>
- B . CDP_cdpCacheDevicelD_CONTAINS_<MACADDRESS>
- C . MAC_MACAddress_CONTAINS_<MACADDRESS>
- D . Radius Called Station-ID STARTSWITH <MACADDRESS>
A Cisco ISE administrator must restrict specific endpoints from accessing the network while in closed mode. The requirement is to have Cisco ISE centrally store the endpoints to restrict access from.
What must be done to accomplish this task?
- A . Add each MAC address manually to a blocklist identity group and create a policy denying access
- B . Create a logical profile for each device’s profile policy and block that via authorization policies.
- C . Create a profiling policy for each endpoint with the cdpCacheDeviceld attribute.
- D . Add each IP address to a policy denying access.